Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File:                     25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier:          GnreErjNhCvTCGDUYHTGaXoJ8CWp6VPH7b2I4QUQ5WQ=
Subject key identifier:   DD:47:80:09:6B:90:23:09:43:6B:82:F8:A9:55:06:16:EB:02:2D:A0
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer:       /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial:       1DFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number:          1DF0
Signing time:             Tue 18 Aug 2026 16:12:11 +0000
Manifest this update:     Tue 18 Aug 2026 16:12:11 +0000
Manifest next update:     Tue 25 Aug 2026 16:12:11 +0000
Files and hashes:         1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: JayeJSRe4rswrGt+ogqvHW4aiwRl6pNAbwEXxi2AeoQ=)
                          2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
                          rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7678 (0x1dfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
        Validity
            Not Before: Aug 18 16:12:11 2026 GMT
            Not After : Aug 25 16:12:11 2026 GMT
        Subject: CN=6a84845b-92e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:6a:67:49:2b:5d:dd:46:fb:51:67:3b:e3:
                    31:91:36:3a:44:95:87:bd:1a:2c:0c:3a:fc:1b:79:
                    ff:23:d8:2f:98:76:22:2f:52:2b:0e:e7:a0:2d:6d:
                    55:87:be:51:5f:49:4d:48:82:c3:53:e0:7e:23:b2:
                    ab:70:90:26:8e:a4:52:b5:2d:79:21:71:42:cf:9d:
                    94:f8:0b:5f:f1:93:8e:13:d9:83:59:e9:2f:ef:ab:
                    ee:54:92:f5:58:ee:30:a5:1a:88:ac:22:06:e6:09:
                    c4:ba:a5:1a:a9:ab:87:36:de:11:75:7c:76:2b:e5:
                    a2:64:7a:af:e1:5c:a5:ab:e7:e9:f1:da:d0:21:f6:
                    69:38:66:77:7f:bc:a9:63:0e:4b:cf:6d:b9:98:2e:
                    a8:db:6d:8b:53:42:07:d9:e5:44:94:9d:f6:46:d2:
                    b4:05:00:95:27:b9:d6:9a:68:35:90:6b:f6:56:fa:
                    dd:70:0c:de:62:2a:4d:6d:ed:4c:41:bc:0f:27:c6:
                    93:47:3f:ea:97:6e:03:8e:51:d7:6d:aa:f3:43:f9:
                    98:76:27:e0:a0:7f:25:f0:0e:a3:ad:fd:31:92:ff:
                    95:7c:a1:58:6f:68:8b:e2:fe:2e:fd:a7:a1:c3:f1:
                    44:4c:b9:e1:26:c5:2b:38:3d:59:92:8f:8b:a6:02:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:47:80:09:6B:90:23:09:43:6B:82:F8:A9:55:06:16:EB:02:2D:A0
            X509v3 Authority Key Identifier:
                keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:16:e6:16:aa:07:07:1e:fe:06:e7:a5:a7:84:12:54:37:
         76:25:dc:bc:bb:fa:a0:5e:0e:8d:d9:37:53:bf:26:a8:55:22:
         e3:cc:cc:5e:09:a0:05:10:4d:7f:56:00:09:37:7a:1a:22:19:
         7d:13:8e:67:42:36:5f:71:42:f8:4a:86:52:7d:48:07:72:1a:
         47:8b:64:e9:07:06:3e:29:12:5d:97:1c:2e:6d:e8:df:7b:17:
         8b:dc:59:00:db:d7:e6:46:27:f8:82:e4:8b:3c:74:07:ed:46:
         97:51:fc:52:93:58:43:d3:38:c4:b0:41:75:e6:3e:95:a7:87:
         03:70:5c:9d:b7:a3:63:72:9c:e7:fe:e8:18:be:ac:be:0f:39:
         9e:88:72:ac:b6:6b:fd:28:6d:b3:9a:ed:d6:06:b9:5f:dd:db:
         90:66:ef:c1:72:ef:ef:74:66:7f:50:4e:f2:c2:02:c4:74:52:
         f2:e9:72:a8:8e:cd:19:5c:e8:ec:c2:6f:cc:65:6a:32:a5:0c:
         d8:83:b5:3e:a2:39:9c:28:3a:ca:c1:f3:49:55:fd:84:38:d5:
         78:42:f3:01:22:b2:09:cc:ca:76:cc:4b:57:c8:9d:7e:63:95:
         7c:21:64:44:cd:ac:ed:de:59:4b:a2:bc:9b:07:0a:16:eb:42:
         5e:3d:2f:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3
NTIyNjM1MTIwHhcNMjYwODE4MTYxMjExWhcNMjYwODI1MTYxMjExWjAYMRYwFAYD
VQQDEw02YTg0ODQ1Yi05MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwdqZ0krXd1G+1FnO+MxkTY6RJWHvRosDDr8G3n/I9gvmHYiL1IrDuegLW1V
h75RX0lNSILDU+B+I7KrcJAmjqRStS15IXFCz52U+Atf8ZOOE9mDWekv76vuVJL1
WO4wpRqIrCIG5gnEuqUaqauHNt4RdXx2K+WiZHqv4Vylq+fp8drQIfZpOGZ3f7yp
Yw5Lz225mC6o222LU0IH2eVElJ32RtK0BQCVJ7nWmmg1kGv2VvrdcAzeYipNbe1M
QbwPJ8aTRz/ql24DjlHXbarzQ/mYdifgoH8l8A6jrf0xkv+VfKFYb2iL4v4u/aeh
w/FETLnhJsUrOD1Zko+LpgK05wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1HgAlr
kCMJQ2uC+KlVBhbrAi2gMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC
NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE
a05ha1RtcnRWNmQxSW1OUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZwwW5haqBwce/gbnpaeEElQ3diXcvLv6oF4Ojdk3U78mqFUi48zMXgmgBRBN
f1YACTd6GiIZfROOZ0I2X3FC+EqGUn1IB3IaR4tk6QcGPikSXZccLm3o33sXi9xZ
ANvX5kYn+ILkizx0B+1Gl1H8UpNYQ9M4xLBBdeY+laeHA3BcnbejY3Kc5/7oGL6s
vg85nohyrLZr/Shts5rt1ga5X93bkGbvwXLv73Rmf1BO8sICxHRS8ulyqI7NGVzo
7MJvzGVqMqUM2IO1PqI5nCg6ysHzSVX9hDjVeELzASKyCczKdsxLV8idfmOVfCFk
RM2s7d5ZS6K8mwcKFutCXj0v+g==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:50 2026 by rpki-client